My organization has recently rolled out the latest version of Show and Share for use by our school districts. We are utilizing a lot of closed/private groups and embedding videos in external course management systems. As we serve over 20 independent districts, there is significant diversity in the capabilities of the various systems that they utilize. To that end, I am searching for a way to pass credentials to the API or other resource without using the swf login. I've started to investigate this, but am unsure if I am on the right track... If I understand it correctly, the API accepts HTTP POST in enctype="application/xml"... If that is correct, then I should be able to pass  <username> and <password> with the authenticate user query. Is this accurate? I would appreciate any thoughts on creating an alternate login that doesn't use a SWF.